CVE - CVE-2009-2848

CVE-ID
CVE-2009-2848	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current->clear_child_tid pointer, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a clone system call with CLONE_CHILD_SETTID or CLONE_CHILD_CLEARTID enabled, which is not properly handled during thread creation and exit.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BUGTRAQ:20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components URL:http://www.securityfocus.com/archive/1/507985/100/0/threaded BUGTRAQ:20100625 VMSA-2010-0010 ESX 3.5 third party update for Service Console kernel URL:http://www.securityfocus.com/archive/1/512019/100/0/threaded MLIST:[linux-kernel] 20090801 [PATCH v2] execve: must clear current->clear_child_tid URL:http://article.gmane.org/gmane.linux.kernel/871942 MLIST:[oss-security] 20090804 CVE request - kernel: execve: must clear current->clear_child_tid URL:http://www.openwall.com/lists/oss-security/2009/08/04/2 MLIST:[oss-security] 20090805 Re: CVE request - kernel: execve: must clear current->clear_child_tid URL:http://www.openwall.com/lists/oss-security/2009/08/05/10 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2009-0016.html FEDORA:FEDORA-2009-9044 URL:https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html REDHAT:RHSA-2009:1438 URL:http://www.redhat.com/support/errata/RHSA-2009-1438.html REDHAT:RHSA-2009:1550 URL:https://rhn.redhat.com/errata/RHSA-2009-1550.html REDHAT:RHSA-2009:1243 URL:http://rhn.redhat.com/errata/RHSA-2009-1243.html SUSE:SUSE-SA:2009:054 URL:http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html SUSE:SUSE-SA:2009:056 URL:http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html SUSE:SUSE-SA:2010:012 URL:http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html UBUNTU:USN-852-1 URL:http://www.ubuntu.com/usn/USN-852-1 OVAL:oval:org.mitre.oval:def:11412 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11412 OVAL:oval:org.mitre.oval:def:8598 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8598 OVAL:oval:org.mitre.oval:def:9766 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9766 SECUNIA:35983 URL:http://secunia.com/advisories/35983 SECUNIA:36501 URL:http://secunia.com/advisories/36501 SECUNIA:36759 URL:http://secunia.com/advisories/36759 SECUNIA:37351 URL:http://secunia.com/advisories/37351 SECUNIA:37471 URL:http://secunia.com/advisories/37471 SECUNIA:37105 URL:http://secunia.com/advisories/37105 SECUNIA:36562 URL:http://secunia.com/advisories/36562 VUPEN:ADV-2009-3316 URL:http://www.vupen.com/english/advisories/2009/3316 XF:kernel-execve-dos(52899) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/52899
Assigning CNA
N/A
Date Entry Created
20090818	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20090818)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org